Privacy policy

For the Sleepy Manager Discord bot, its dashboard and this website.

Last updated 2 November 2026

Who runs Sleepy Manager

Sleepy Manager is a Discord bot run by an individual, not a company. In this policy, "we" means the person who runs it. You can reach us in our support server (https://discord.gg/mrBC8r8MZD) or by emailing support@thesleepylabs.com.

What the bot records in servers

The bot only starts recording in a server once that server's owner or an admin has finished setup. Each server's admins can switch any of the first five of these off on the dashboard's Settings page or with the /recording command.

• Edited and deleted messages: the text before and after an edit, the text of deleted messages, attachment file names, who wrote them and in which channel.
• Member activity: people joining and leaving, and nickname and role changes, including who made them.
• Voice activity: joining, leaving and moving between voice channels, and server mutes and deafens.
• Commands: which commands people use, where, and what they typed.
• Moderation: bans, kicks, timeouts and purges, who did them and the reason given.
• Moderation cases: every warning, timeout, kick, ban, softban and note gets a numbered case with the member, the moderator, the reason and any changes to it.
• Reports: when a member uses "Report to moderators", the reported message's text, who wrote it, who reported it, their reason and what staff decided.
• Case evidence: links and screenshots that staff add to a case. Screenshots are stored by the bot (not posted anywhere), redrawn as a new image before they're saved, so hidden details like location data and camera info are removed, and only that server's staff can open them on the dashboard. Staff can remove a screenshot at any time. Screenshots are deleted with their case, or when the server's keep time (below) runs out, whichever comes first, even on warnings and notes.
• Alerts: things like join surges, powerful roles being handed out and mass deletes.

Security and Automod

These protect servers and are on in every server where the bot has the permissions it needs.

• Messages are checked as they arrive. Automod looks at each new message for spam, scam links and other rule breaks. A message is not saved unless it breaks a rule, and even then the case records which rule was broken, not the message text. If the server has a moderation log channel, the blocked message is shown there so staff can see what was removed; it isn't kept in the bot's own database. To spot hacked accounts posting the same thing everywhere, the bot remembers each member's last two minutes of messages in working memory only, never on disk.
• Scam links: the bot downloads a public list of known scam websites once a day. Nothing about you or your server is sent to get it, and the bot never visits links people post.
• "Try a message": text typed into Automod's test box on the dashboard or /automod test is checked and thrown away, not saved.
• Security history: who did what when protection stepped in: mass deletes or bans, raids, panic mode, restores, bots added.
• Quarantine: if someone is quarantined, the roles taken from them are saved so they can be given back.
• Deleted channels and roles are remembered for 7 days (their names, settings and permissions, not messages) so they can be rebuilt.
• Verification: for members who are asked to verify, the reason (for example a new account), when they joined, how many tries they took and when they passed. No DMs, websites, IP addresses or device checks are used.
• Raids and the trap channel: during a raid, new members can be held back until staff decide. Anyone who posts in the server's trap channel (a "honeypot", only visible to members who haven't verified) is removed and their recent messages cleared.
• Server checks: the bot looks at the server's own setup (channels, roles, permissions, Discord safety settings) to warn staff about problems, for example a missing verify channel. It reads settings only, not anyone's messages.

How long things are kept

Logs, alerts, the security history, Automod strikes, closed reports and moderation cases for kicks, bans, softbans and timeouts are deleted automatically after 7 days on the Free plan, 30 days on Doze, 90 on Nap and 180 on Hibernate. Warnings and moderator notes are kept for as long as the bot is in the server, on every plan. A case that a running timer (like a temporary ban) or an open report depends on is kept until that's finished. Screenshots follow the plan's keep time from the day they were added.

Verification records and released quarantines follow the same keep times.

To spot edits and deletions, the bot keeps the most recent messages it has seen in its working memory. That memory is never written to disk and is cleared whenever the bot restarts. A message is only saved if it's edited or deleted, and only in servers that record messages.

Messages the bot sends

When a moderator (or Automod or Security) warns, times out, kicks or bans someone, the bot sends that person a direct message with the server's name, what happened, the reason, how long it lasts and the case number, unless the server has switched these messages off. Servers can also have the bot post logs, alerts and a weekly security summary in their own channels.

Server settings

The bot saves each server's settings: chosen roles and channels, Automod and Security settings, the welcome message and alert preferences. These stay while the bot is in the server. If the bot is removed, the server's settings, logs and cases are kept for 30 days in case it's added back, then deleted. Premium plans belong to the person who paid for them, so a plan isn't deleted when the bot leaves one of its servers.

The dashboard

When you log in to the dashboard with Discord, we receive your Discord ID, username, display name, profile picture and the list of servers you're in, along with your permissions in each. We keep only the servers Sleepy Manager is in or that you can manage, to show you your dashboard, and drop the rest straight away. Discord's login token is thrown away straight after logging in. Your login lasts 7 days, or until you log out. The bot only stores a scrambled version (a hash) of your login cookie, so a copy of its database couldn't be used to log in as you.

Changes you make on the dashboard are recorded in that server's logs, so its staff can see who changed what.

While a dashboard page is open, it keeps a connection to the bot so changes appear by themselves. That connection only carries "something changed" notices; nothing extra is stored.

The bot's owner has a private admin page for running the service. For people with Premium it shows their plan, which servers they share with Sleepy Manager, their roles there and moderation cases in those servers. It never shows the full list of servers you're in.

Downloads

Staff can download their server's cases and security history as a PDF (on the Free plan it carries a small watermark) and, on paid plans, as a spreadsheet. These files include member and moderator names, reasons and dates. They're made when asked for and sent straight to the person downloading them; the bot doesn't keep a copy. Once downloaded, looking after the file is up to that server's staff.

Cookies

The dashboard uses one cookie, sm_session, to keep you logged in, and a second one, sm_oauth_state, for the 10 minutes while you're logging in. Both are needed for logging in to work, so there's nothing to opt into. Your browser also remembers that you've dismissed the cookie notice. There are no analytics, advertising or tracking cookies. The dashboard's fonts are served by the bot itself. Profile pictures and server icons load from Discord.

The dashboard reaches the internet through Cloudflare, which passes your visit on to the bot and briefly sees your IP address and browser details to keep the connection secure. The bot uses your IP address only to limit repeated login attempts and doesn't store it.

Who else sees data

Everything the bot keeps is stored on the computer it runs on. We don't sell or rent data. It reaches others only when that's how a feature works:

• Discord, which the bot runs on.
• Cloudflare, which carries visits to the dashboard and hosts this website (see Cookies and This website).
• Anyone, if the law requires it.

We also run a separate test version of the bot ("Sleepy Testing") to try new features before they reach everyone. It has its own data and is only used in our own test server.

This website

This policy also covers thesleepylabs.com. The website has no accounts, no forms, no cookies and no advertising. It's hosted on Cloudflare, which processes standard technical details (your IP address, browser type and the pages requested) to deliver the site and protect it from abuse.

We use Cloudflare Web Analytics to count visits: which pages are viewed, roughly where visitors come from (country and the site that linked to us), the type of device and browser, and how fast pages load. It doesn't use cookies, doesn't follow you across other sites and doesn't build a profile of you. We only see totals, not individual visitors.

If you email us at support@thesleepylabs.com, we use your email address and message only to reply, and keep them only as long as that conversation needs.

Your choices

• Server admins can turn off any kind of recording, switch off punishment messages, or remove the bot.
• Staff can delete a case or remove a screenshot from it at any time.
• You can log out of the dashboard at any time.
• You can ask us what we hold about you, or ask for it to be deleted, in our support server (https://discord.gg/mrBC8r8MZD) or by emailing support@thesleepylabs.com. Tell us your Discord ID so we can find it.

Age

Discord requires everyone to be at least 13, or older where local law says so. Sleepy Manager follows the same rule.

Changes

When we add a feature that changes what's collected, kept or shown, this policy is updated at the same time and the date at the top changes.